General
- Target 2026-08-20_1f8cc61637fbe98a23143afd50af3b88_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 11.5MB
- Sample260820-gvs2fs1ard
- SHA256 308508af22a4a93397cfb5a420aeb67780b0b9384344344f70141c67ee24dea2
- MD5 1f8cc61637fbe98a23143afd50af3b88
- SHA1 4b33c8ba0620ba7eab124ac8e5899721d6b0a4e2
- SHA512 fe208d9d7942ed6436f56d30e05b177c29281761f6aafff90357381e4fb933e300444b243eb15119e8955543ba20aeaca15badd0ab53f4931b0cee578b48ad0c
- SSDEEP 196608:wvnPg3tDDCTY8euWKkryxLfodYCtdiuOTeqmTHoLYSS4QIL+CbpufXYdhS59o:wvnPg3tDDwY8euxkryZfLC7oTeqmTHoF
- TLSH T100C62232F58180B2D99710706619FB7A5EB9FD30026A5DD353BC3C0AE6328529D7F29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-20_1f8cc61637fbe98a23143afd50af3b88_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_1f8cc61637fbe98a23143afd50af3b88_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_1f8cc61637fbe98a23143afd50af3b88_amadey_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 11.5MB
- SHA256 308508af22a4a93397cfb5a420aeb67780b0b9384344344f70141c67ee24dea2
- MD5 1f8cc61637fbe98a23143afd50af3b88
- SHA1 4b33c8ba0620ba7eab124ac8e5899721d6b0a4e2
- SHA512 fe208d9d7942ed6436f56d30e05b177c29281761f6aafff90357381e4fb933e300444b243eb15119e8955543ba20aeaca15badd0ab53f4931b0cee578b48ad0c
- SSDEEP 196608:wvnPg3tDDCTY8euWKkryxLfodYCtdiuOTeqmTHoLYSS4QIL+CbpufXYdhS59o:wvnPg3tDDwY8euxkryZfLC7oTeqmTHoF
- TLSH T100C62232F58180B2D99710706619FB7A5EB9FD30026A5DD353BC3C0AE6328529D7F29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.